fix(deps): bump the npm-major group across 1 directory with 6 updates

[dependabot]

Bumps the npm-major group with 6 updates in the / directory:

Package	From	To
undici	8.6.0	8.7.0
@anthropic-ai/claude-agent-sdk	0.3.201	0.3.202
@typescript/native-preview	7.0.0-dev.20260703.1	7.0.0-dev.20260706.1
@vitest/coverage-istanbul	4.1.9	4.1.10
oxfmt	0.57.0	0.58.0
vitest	4.1.9	4.1.10

Updates undici from 8.6.0 to 8.7.0

Release notes

Sourced from undici's releases.

v8.7.0

What's Changed

• test: guard balanced-pool error port lookup by @​mcollina in nodejs/undici#5463
• perf: optimize http/2 request hot path by @​mcollina in nodejs/undici#5483
• fix: do not reject open-ended Range values in simpleRangeHeaderValue by @​spokodev in nodejs/undici#5490
• fix(eventsource): set use-URL-credentials flag by @​Ram-blip in nodejs/undici#5489
• test: deflake connect-timeout watchdog by @​mcollina in nodejs/undici#5197
• docs: correct npm script name and JSON syntax in examples by @​lenoxfernando in nodejs/undici#5496
• fix: reject non-ascii octets in validateCookiePath by @​spokodev in nodejs/undici#5452
• fix(readable): ignore late consume chunks by @​marko1olo in nodejs/undici#5375
• fix(h2): destroy the stream on abort instead of relying on close() by @​staylor in nodejs/undici#5462
• fix: ignore an unparseable Set-Cookie Expires attribute by @​spokodev in nodejs/undici#5488
• docs: add reproduction guide and update bug report template by @​mcollina in nodejs/undici#5451
• fix(h2): guard onResponse against a 'response' event delivered after completion by @​staylor in nodejs/undici#5440
• fix(h2): requeue request on GOAWAY'd session instead of crashing by @​staylor in nodejs/undici#5453
• fix: add static buildDispatch method to RedirectHandler type definition by @​matthieusieben in nodejs/undici#5442
• fix: auto-detect HTTP proxy tunneling by @​mcollina in nodejs/undici#5116

New Contributors

• @​spokodev made their first contribution in nodejs/undici#5490
• @​lenoxfernando made their first contribution in nodejs/undici#5496
• @​staylor made their first contribution in nodejs/undici#5462

Full Changelog: nodejs/undici@v8.6.0...v8.7.0

Commits

• cb4c2f1 Bumped v8.7.0 (#5501)
• a8d1a95 fix: auto-detect HTTP proxy tunneling (#5116)
• cb30e58 fix: add static buildDispatch method to RedirectHandler type definition (#5442)
• 0c08579 fix(h2): requeue request on GOAWAY'd session instead of crashing (#5453)
• e5b3364 fix(h2): guard onResponse against a 'response' event delivered after completi...
• c0007f4 docs: add reproduction guide and update bug report template (#5451)
• e529cab fix: ignore an unparseable Set-Cookie Expires attribute (#5488)
• 754742c fix(h2): destroy the stream on abort instead of relying on close() (#5462)
• db34f5f fix(readable): ignore late consume chunks (#5375)
• 4ea05a8 fix: reject non-ascii octets in validateCookiePath (#5452)
• Additional commits viewable in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.201 to 0.3.202

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.202

What's changed

• Added parent_agent_id field to subagent session messages for building depth-2+ agent trees from disk-persisted metadata
• Fixed apply_flag_settings with a non-object settings value crashing the session instead of returning a control error

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.202
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.202
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.202
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.202

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.202

• Added parent_agent_id field to subagent session messages for building depth-2+ agent trees from disk-persisted metadata
• Fixed apply_flag_settings with a non-object settings value crashing the session instead of returning a control error

Commits

• 46d7df9 chore: Update CHANGELOG.md
• See full diff in compare view

Updates @typescript/native-preview from 7.0.0-dev.20260703.1 to 7.0.0-dev.20260706.1

Commits

• See full diff in compare view

Updates @vitest/coverage-istanbul from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-istanbul's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Updates oxfmt from 0.57.0 to 0.58.0

Commits

• 39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
• See full diff in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Supabase CLI preview

npx --yes https://pkg.pr.new/supabase/cli/supabase@b2b72615296b7c7787a232c16f057459e041d9a5

Preview package for commit b2b7261.